Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
YouTube Security VideosGoogle Cloud Tech: Gemini is coming to your city(24.09.2026 um 15:00 Uhr)
AI & KI NachrichtenGoogle’s latest moonshot to put machine learning in space(24.09.2026 um 15:12 Uhr)
Windows Tipps & SecurityPoll: What's your favorite Surface of 2026?(24.09.2026 um 14:58 Uhr)
Sichere ProgrammierungStreaming Materialized Views for Live Read Models (2026)(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA Day Is Not 86400 Seconds: The DST Bug in Your Date Math(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungSetting up Traefik: reverse proxy with automatic HTTPS(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA 200 OK response does not prove a secret leak(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungHow hot do you like it?(24.09.2026 um 15:05 Uhr)
YouTube Security VideosGoogle Cloud Tech: Gemini is coming to your city(24.09.2026 um 15:00 Uhr)
AI & KI NachrichtenGoogle’s latest moonshot to put machine learning in space(24.09.2026 um 15:12 Uhr)
Windows Tipps & SecurityPoll: What's your favorite Surface of 2026?(24.09.2026 um 14:58 Uhr)
Sichere ProgrammierungStreaming Materialized Views for Live Read Models (2026)(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA Day Is Not 86400 Seconds: The DST Bug in Your Date Math(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungSetting up Traefik: reverse proxy with automatic HTTPS(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungA 200 OK response does not prove a secret leak(24.09.2026 um 15:02 Uhr)
Sichere ProgrammierungHow hot do you like it?(24.09.2026 um 15:05 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

I gave Hermes Agent 30 days to learn my workflow. It didn't just remember — it got smarter

This is a submission for the Hermes Agent Challenge: Write About Hermes Agent The confession no one wants to make I've been lying to myself about AI agents. For two years, I've bounced between tools — ChatGPT, Claude, various o…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

This is a submission for the Hermes Agent Challenge: Write About Hermes Agent






The confession no one wants to make



I've been lying to myself about AI agents.



For two years, I've bounced between tools — ChatGPT, Claude, various open‑source experiments. I'd tell myself each new one was the one. Then, inevitably, I'd hit the same wall:



Every morning, I'd open the chat and be a stranger again.



No memory of yesterday's debugging session. No recognition that I always want timestamps in UTC. No idea that I'd already spent three hours chasing that exact bug last week.



We've normalized this amnesia. We call it "stateless" and pretend it's a feature. But a tool that forgets you every time you close the window isn't intelligent — it's a goldfish with a text box.



Then I found Hermes Agent. And instead of another weekend fling, I gave it 30 days of real work. This is what happened — and why I'm never going back to rented AI.






The three lies we've been sold about "agentic" AI



Before I get into Hermes, let me name the lies that have become industry gospel:



Lie #1: "Stateless is a feature." No, it's a convenience for the provider and a tax on the user. Every session reset costs you time, context, and trust.



Lie #2: "More parameters = better understanding." A 1‑trillion‑parameter model that can't remember what you asked five minutes ago isn't "understanding" anything. It's pattern‑matching with amnesia.



Lie #3: "You don't need memory — you just need a bigger context window." Context windows are bandaids. They treat the symptom (short‑term forgetfulness) while ignoring the disease (no persistent learning).



Hermes Agent is the first tool I've used that rejects all three lies. Not through marketing — through architecture.






The four‑memory model (and why most agents stop at one)



Here's the mental model that changed everything for me.



Every agent has working memory — the current conversation. That's Layer 1. When you close the window, it's gone. Most agents stop here.



Hermes adds three more layers:



Layer 2: Procedural memory. When Hermes completes a non‑trivial task — say, "watch this GitHub repo and summarize new PRs" — it automatically generates a skill document: a Markdown file in ~/.hermes/skills/ that captures the how, not just the what. Steps, tools, reasoning, even failure modes.



This isn't caching. It's the agent learning procedures from its own experience.



Layer 3: Episodic memory. Session summaries, project context, and user preferences live in a local SQLite database with full‑text search. When you return after two weeks, you can say "what were we working on with that authentication bug?" and it knows.



Layer 4: Semantic memory. Over time, Hermes builds a model of you — your coding style, your communication preferences, the frameworks you reach for, the mistakes you repeat. It doesn't just remember facts. It remembers who you are as a developer.



But the real magic isn't the layers themselves. It's what happens between them.






The GEPA loop: when an agent learns to learn



About two weeks into my experiment, I noticed something unsettling.



I had asked Hermes to monitor a second repository — same structure, different team. Without any prompt from me, it adapted the PR‑summary skill from the first repo. Not just copying — adapting. It changed the notification format because the second team preferred markdown tables over bullet points. It added a new step to check for stale dependencies, something the first team didn't care about.



How? The GEPA loop — a self‑improvement engine that runs every ~15 tasks. GEPA stands for Genetic‑Pareto Prompt Evolution. In plain English: it reads execution traces, identifies what failed (success rate < 90% or token waste > threshold), generates candidate improvements, evaluates them against a small set of held‑out tasks, and updates the skill if the new version is better.



No GPU training. No human in the loop. Just an agent that gets better at your workflows because it has learned your success metrics.



After 30 days, Hermes had generated 17 custom skills. Tasks that took 4‑5 prompts the first time now took one. Sometimes zero — it would proactively run a scheduled check and surface results before I asked.



That's the difference between automation and autonomy. Automation does what you tell it. Autonomy learns what you need and adapts.






The "delegate and forget" pattern that saves my sanity



Let me show you the code pattern that changed my daily workflow.



Instead of forcing one agent to juggle everything — web search, API calls, file parsing, report generation — I now use delegate_task to spawn parallel child agents:




# Hermes skill snippet (simplified)
tasks = [
{"goal": "Fetch latest news on topic X", "tools": ["web_search"]},
{"goal": "Query academic papers from arXiv", "tools": ["arxiv"]},
{"goal": "Scan internal docs for relevant patterns", "tools": ["file_search"]}
]
results = delegate_task(tasks, mode="batch", max_concurrent=3)






Each child runs in an isolated terminal session with its own context window and restricted toolset — no deadlocks, no context bleed. The parent only sees the final summaries.



This cut my research time by 60%. Not because the model got faster — because I stopped waiting for one agent to do everything sequentially.






Where it still fails (honest section, because trust matters)



I'm not here to sell you a dream. Hermes has real rough edges.



Silent failure is the worst. I misconfigured a GitHub token — wrong scope. Hermes tried to run a PR summary, failed, and just... stopped. No error message. No "hey, your token is missing repo:status." I spent 20 minutes debugging what should have been a one‑line error.



Over‑engineering skills is real. The GEPA loop once turned a one‑off "convert CSV to JSON" task into a 47‑step skill with validation, logging, and retry logic. For a file I processed once. I had to manually prune it.



Context bleed happens. In a long conversation about frontend performance, it pulled a fact from a completely unrelated backend discussion earlier that day. Nothing sensitive — just wrong. The memory management isn't perfect.



Reasoning has a ceiling. I asked it to compare two cloud architectures for a fintech startup. It gave me a textbook answer — solid, but missing the battle‑tested "here's where each one actually breaks in production" nuance that a senior architect would add.



I'd rather debug these limitations on my own server than be at the mercy of a cloud provider that can change its pricing or policies tomorrow.






The economics that actually matter



After 30 days, here's my P&L:



Direct costs:




  • $5/month VPS (Digital Ocean)

  • $1.47 in API calls (OpenRouter, mostly GPT‑4o‑mini)

  • Total: $6.47



Time saved:




  • Repetitive tasks went from 20 minutes → 8 minutes on average

  • 12 minutes saved per task × ~45 tasks = 9 hours reclaimed

  • At my consulting rate, that's over $2,000 of value



Intangible gains:




  • Zero hours spent re‑explaining my preferences

  • Zero anxiety about a tool shutting down or changing terms

  • A growing library of skills that only I control



The cloud AI business model depends on you starting over. Hermes depends on you compounding.






The 7‑day challenge I'm giving you



Stop reading. Go do this:




  1. Spin up a $5 VPS (or use WSL2 on your local machine).

  2. Run curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash

  3. Run hermes model to pick a provider (OpenRouter is easiest).

  4. Give Hermes ONE real, repetitive task you hate — monitoring a repo, summarizing a feed, checking logs.

  5. After 7 days, run ls ~/.hermes/skills/ and count the skills it auto‑generated.

  6. Come back and comment: How many prompts did it save you? Did it learn anything about YOU that surprised you?



I'll wait.






Why this matters beyond the tool



We're at a strange inflection point in AI. The raw capabilities of models are advancing so fast that we've stopped asking an important question: Capable at what?



An agent that can write beautiful code but can't remember what it wrote yesterday isn't actually useful for real work. An assistant that nails every conversation but treats you like a stranger every morning isn't an assistant — it's a party trick.



Hermes Agent represents a different bet. The bet is that intelligence isn't just about what you can do in a single session. It's about what you learn, remember, and improve over time. That's true for humans. It should be true for the AI systems we build.



I'm not saying Hermes is perfect. I'm saying it's the first agent I've used that treats my time and context as something worth accumulating — not resetting.



Your AI shouldn't forget you.



Try it for a week. Give it real work. Then tell me if you ever want to go back to the goldfish.



This is a submission for the Hermes Agent Challenge: Write About Hermes Agent.



Resources:





What's your experience with persistent agents? Have you tried running one long‑term, or are you still bouncing between stateless tools? Drop a comment — I genuinely want to hear the counterarguments.

CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - I gave Hermes Agent 30 days to learn my workflow. It didn't just remember — it got smarter
id: fcacde93-d14e-4ec9-9d24-18bcc2bf6f94
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "I gave Hermes Agent 30 days to" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich I gave Hermes Agent 30 days to learn my .... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten I gave Hermes Agent 30 days to learn my workflow. It didn't just remember — it got smarter

Thematisch verwandte Begriffe: gave, Hermes, Agent, days · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97179 | A security vulnerability has been detected in O2OA up to 9.5.3/10.0.2. T…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick